deploy-todo-app-in-eks-vpc-by-terraform/main.tf at master · hnjaman/deploy-todo-app-in-eks-vpc-by-terraform · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
provider "aws" {
  region = var.Region_US_West_1_NCalifornia
}

module "vpc" {
  source         = "./modules/vpc"
  vpc_cidr_block = var.vpc_cidr_block_map.vpc
}

module "igw" {
  source = "./modules/internet-gateway"
  vpc_id = module.vpc.vpc_id
}

module "eip" {
  source      = "./modules/elastic-ip"
  igw_id      = module.igw.igw_id
  environment = var.environment
}

module "nat_gw" {
  source            = "./modules/nat-gateway"
  nat_eip_id        = module.eip.nat_eip_id
  public_subnet1_id = module.subnet.public_subnet1_id
  environment       = var.environment
}

module "rt" {
  source             = "./modules/route-table"
  vpc_id             = module.vpc.vpc_id
  igw_id             = module.igw.igw_id
  nat_gw_id          = module.nat_gw.nat_gw_id
  all_ip_cidr        = var.vpc_cidr_block_map.all_ip
  public_subnet1_id  = module.subnet.public_subnet1_id
  public_subnet2_id  = module.subnet.public_subnet2_id
  private_subnet1_id = module.subnet.private_subnet1_id
  private_subnet2_id = module.subnet.private_subnet2_id
  environment        = var.environment
}

module "subnet" {
  source               = "./modules/subnet"
  vpc_id               = module.vpc.vpc_id
  public_subnet1_cidr  = var.vpc_cidr_block_map.public_subnet1
  public_subnet2_cidr  = var.vpc_cidr_block_map.public_subnet2
  private_subnet1_cidr = var.vpc_cidr_block_map.private_subnet1
  private_subnet2_cidr = var.vpc_cidr_block_map.private_subnet2
  availability_zone_1  = var.availability_zone_1
  availability_zone_2  = var.availability_zone_2
}

module "security_group" {
  source              = "./modules/security-group"
  environment         = var.environment
  vpc_id              = module.vpc.vpc_id
  bastion_host_pvt_ip = module.ec2.bastion_host_pvt_ip
  all_ip_cidr         = var.vpc_cidr_block_map.all_ip
}

module "ec2" {
  source             = "./modules/ec2"
  public_subnet1_id  = module.subnet.public_subnet1_id
  private_subnet1_id = module.subnet.private_subnet1_id
  private_subnet2_id = module.subnet.private_subnet2_id
  bastion_host_sg_id = module.security_group.bastion_host_sg_id
  instance_type      = var.T2_Micro
  ami                = var.Amazon_linux_AMI_US_WEST_1_NCalifornia
  environment        = var.environment
}

module "iam" {
  source      = "./modules/iam"
  environment = var.environment
}

module "eks" {
  source      = "./modules/eks"
  environment = var.environment
  # for eks cluster
  cluster_role_arn                           = module.iam.cluster_iam_role_arn
  public_subnet1_id                          = module.subnet.public_subnet1_id
  public_subnet2_id                          = module.subnet.public_subnet2_id
  role_policy_AmazonEKSVPCResourceController = module.iam.role_policy_AmazonEKSVPCResourceController
  role_policy_AmazonEKSClusterPolicy         = module.iam.role_policy_AmazonEKSClusterPolicy

  # for eks node group
  nodegroup_iam_role_arn                            = module.iam.nodegroup_iam_role_arn
  ng_role_policy_AmazonEKSWorkerNodePolicy          = module.iam.ng_role_policy_AmazonEKSWorkerNodePolicy
  ng_role_policy_AmazonEKS_CNI_Policy               = module.iam.ng_role_policy_AmazonEKS_CNI_Policy
  ng_role_policy_AmazonEC2ContainerRegistryReadOnly = module.iam.ng_role_policy_AmazonEC2ContainerRegistryReadOnly
  private_subnet1_id                                = module.subnet.private_subnet1_id
  private_subnet2_id                                = module.subnet.private_subnet2_id
}